Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
File:                     9us1U0TzVfLF8cawuowwnBFDxsc.mft (raw, json)
Hash identifier:          VxkXMr0SPnBaFPMJVj4k77Wk/NEAqg/VQpAKKfaB6nw=
Subject key identifier:   D4:4F:1D:FF:19:2F:98:7F:56:A9:E6:49:2E:B9:25:93:96:EA:38:40
Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
Certificate issuer:       /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Certificate serial:       019EBF232A2A24062ED57DFBE1CAC79DD1F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
Manifest number:          1431
Signing time:             Sat 13 Jun 2026 04:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:13 +0000
Files and hashes:         1: 9us1U0TzVfLF8cawuowwnBFDxsc.crl (hash: QdVaGiaHLmG57B7Vcac758yOnB7RwgQg8sSm2RWm6wI=)
                          2: ueo3GEvAi3EUPHegDlQ1GPk4SCg.roa (hash: /54TVaQGpWQlA0th+KPLCMlkXLtNsFvetSrJmgBZFMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:2a:2a:24:06:2e:d5:7d:fb:e1:ca:c7:9d:d1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
        Validity
            Not Before: Jun 13 04:00:13 2026 GMT
            Not After : Jun 14 04:00:13 2026 GMT
        Subject: CN=d44f1dff192f987f56a9e6492eb9259396ea3840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:a4:4e:dd:e2:a5:ba:0f:ba:6a:87:21:97:a1:
                    d4:9f:1e:23:7d:da:8a:33:e1:42:2c:6c:59:a8:13:
                    94:66:c7:fb:a6:8f:27:58:6c:d8:e7:20:1e:17:37:
                    9c:91:c5:e6:fa:86:97:fa:a0:2b:99:78:a8:26:4c:
                    ab:f7:de:06:83:74:b5:ed:4b:fd:3a:a9:8a:9c:04:
                    a4:83:d4:44:b7:ba:16:47:1a:e4:16:ff:7c:32:9c:
                    55:6e:5b:ea:7c:5b:9f:90:ab:6c:d4:1f:00:50:5d:
                    d2:67:2e:a2:3c:74:9f:c7:f3:d5:cd:c0:2c:d8:3b:
                    42:4f:c2:a0:a7:b8:91:27:0d:f4:3b:b3:0d:c9:89:
                    5e:d7:08:91:bd:58:ce:a3:b6:e9:eb:5b:8c:a5:eb:
                    1e:64:17:a6:17:71:e6:7a:7e:45:38:3a:2d:d2:c0:
                    f2:1d:d7:3f:e8:fa:3d:3c:1c:5e:1f:12:56:68:09:
                    2a:f8:c4:0c:3d:a5:fd:d9:aa:aa:1b:c5:8b:86:f5:
                    e2:ec:69:dd:ff:3d:56:cb:77:98:8f:61:8f:55:27:
                    85:60:e2:ae:39:ca:14:d6:2d:e2:5d:a6:99:83:2b:
                    fc:0c:35:50:c1:30:07:e0:b5:17:fc:d5:a1:67:87:
                    1e:ba:e1:a4:90:3f:26:98:ed:b3:bb:dc:e6:a1:af:
                    c9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4F:1D:FF:19:2F:98:7F:56:A9:E6:49:2E:B9:25:93:96:EA:38:40
            X509v3 Authority Key Identifier:
                keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:68:66:89:32:1a:eb:3b:e9:fc:34:0f:8c:93:f9:af:b5:80:
         c6:b9:58:47:4b:20:fc:e6:dc:24:23:57:3c:cb:17:af:97:04:
         97:6c:ed:3e:66:ef:cd:3d:60:48:9e:ef:10:f1:1f:5b:af:a5:
         9b:4e:47:32:d3:eb:eb:96:09:66:4d:e3:4b:dd:e5:48:a9:dc:
         59:d6:22:ec:c8:8c:d2:af:7d:60:19:48:1c:a6:ae:7e:15:fb:
         c0:95:ca:31:b7:da:42:54:da:08:51:bf:04:5a:b0:29:20:83:
         e5:7e:a2:87:f6:ec:4f:45:71:8d:a7:c7:48:09:0f:50:26:ba:
         37:bc:f1:3c:7f:8b:cc:a5:b3:da:59:fa:fc:be:ec:2a:41:d0:
         d6:a5:ae:7d:45:c1:10:f8:2a:cc:cb:3a:0f:4b:79:66:3a:01:
         c5:73:ba:b2:da:fa:4d:64:90:84:b5:df:d2:8b:ac:ae:f2:ef:
         47:27:ac:60:66:f2:f1:af:10:a6:ee:1e:f8:83:52:b0:7b:6e:
         76:82:71:8a:4a:47:5c:d1:fe:2d:87:89:73:60:ed:a5:1f:06:
         1c:5a:b2:4f:b8:ce:c9:ad:48:10:9a:cc:55:ce:4c:10:18:53:
         ac:d2:05:2b:5f:19:e8:bd:e5:ec:64:c1:6d:69:61:93:50:10:
         20:7c:29:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/IyoqJAYu1X374crHndH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZWIzNTUzNDRmMzU1ZjJjNWYxYzZiMGJhOGMzMDljMTE0
M2M2YzcwHhcNMjYwNjEzMDQwMDEzWhcNMjYwNjE0MDQwMDEzWjAzMTEwLwYDVQQD
EyhkNDRmMWRmZjE5MmY5ODdmNTZhOWU2NDkyZWI5MjU5Mzk2ZWEzODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+aRO3eKlug+6aochl6HUnx4jfdqK
M+FCLGxZqBOUZsf7po8nWGzY5yAeFzeckcXm+oaX+qArmXioJkyr994Gg3S17Uv9
OqmKnASkg9REt7oWRxrkFv98MpxVblvqfFufkKts1B8AUF3SZy6iPHSfx/PVzcAs
2DtCT8Kgp7iRJw30O7MNyYle1wiRvVjOo7bp61uMpeseZBemF3Hmen5FODot0sDy
Hdc/6Po9PBxeHxJWaAkq+MQMPaX92aqqG8WLhvXi7Gnd/z1Wy3eYj2GPVSeFYOKu
OcoU1i3iXaaZgyv8DDVQwTAH4LUX/NWhZ4ceuuGkkD8mmO2zu9zmoa/JTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRPHf8ZL5h/VqnmSS65JZOW6jhAMB8GA1UdIwQY
MBaAFPbrNVNE81XyxfHGsLqMMJwRQ8bHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXVzMVUwVHpWZkxGOGNhd3Vvd3duQkZEeHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MTBjZjEtY2Y0MS00Y2JiLWE1M2Et
NDkzZGE5Y2M0YzBjLzEvOXVzMVUwVHpWZkxGOGNhd3Vvd3duQkZEeHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84MTBjZjEtY2Y0MS00Y2JiLWE1M2EtNDkzZGE5Y2M0YzBj
LzEvOXVzMVUwVHpWZkxGOGNhd3Vvd3duQkZEeHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2hmiTIa
6zvp/DQPjJP5r7WAxrlYR0sg/ObcJCNXPMsXr5cEl2ztPmbvzT1gSJ7vEPEfW6+l
m05HMtPr65YJZk3jS93lSKncWdYi7MiM0q99YBlIHKaufhX7wJXKMbfaQlTaCFG/
BFqwKSCD5X6ih/bsT0VxjafHSAkPUCa6N7zxPH+LzKWz2ln6/L7sKkHQ1qWufUXB
EPgqzMs6D0t5ZjoBxXO6str6TWSQhLXf0ousrvLvRyesYGby8a8Qpu4e+INSsHtu
doJxikpHXNH+LYeJc2DtpR8GHFqyT7jOya1IEJrMVc5MEBhTrNIFK18Z6L3l7GTB
bWlhk1AQIHwpwg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:32 2026 by rpki-client